Re: [saml-dev] SAML SSO fails:

From
Phalguni Mukherjee <>
Date
2014-04-02T15:40:44+00:00
ID
Thread
Re: [saml-dev] SAML SSO fails:
Do I need to set it as request attribute or how it can be set in sp initiated login?

On Wed, Apr 2, 2014 at 7:03 PM, Paul Hethmon <> wrote:

How you handle cookies is outside the scope of the SAML protocol. Checking resources about browser cookie handling will likely yield an answer on how to properly set and retrieve the cookies.

However, you may use the SAML RelayState parameter as a means to round trip this type of information from your Server Provider to the Identity Provider and back to your SP again.

Paul

On Apr 2, 2014, at 9:25 AM, Phalguni Mukherjee <> wrote:

whenever
 a request comes for authentication to "samlserver" i store the requested URL against the session ID in a local cache and then set the session id to the cookie as "requestid" before sending the request for authentication. I am setting the cookie so that when
 the response comes back to the server I can use it to pick the requested URL from the server and redirect the assertion to the respective server, But I am getting my cookie as null in the response, may be it is getting lost due to Post response coming from
 ID provider from different domain, So just wanted to know is their any workaround to this problem so that each ID provider response is mapped to the correct requested URL.

Paul Hethmon

Chief Software Architect



-- 
Thanks & Regards
Phalguni Mukherjee